Privacy Policy

Last updated: January 23, 2026

MEBIGX Digital Studio is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website.

Information We Collect

We collect information that you provide directly to us, such as when you contact us through our website or communicate with us via email. We also collect information automatically through analytics tools to understand how visitors interact with our website.

Analytics and Tracking Tools

We use Google Analytics 4 (GA4) and Google Search Console to analyze website traffic, understand user behavior, and improve our website performance. These tools use cookies and similar technologies to collect anonymized data about how visitors use our website.

All analytics data is anonymized and does not contain personally identifiable information. You can opt out of analytics tracking through our cookie consent system or by using browser settings.

How We Use Your Information

We use the information we collect to respond to your inquiries, provide our services, and improve our website and services.

Data Protection

We implement industry-standard administrative and technical measures to protect your personal information. All analytics data is anonymized and does not contain personally identifiable information.

Data Sovereignty & Residency

Infrastructure for MEBIGX is physically hosted within the European Economic Area (EEA) across Frankfurt, Paris, and Stockholm. This ensures all processing remains within a high-protection regulatory zone aligned with Law No. 06/L-082.

AIP Compliance & Complaints

Users have the right to lodge a complaint with the Information and Privacy Agency (AIP): Str. Zejnel Salihu, No. 22, 10000 Prishtina. | aip.rks-gov.net

Global Compliance

MEBIGX operates under a 'Highest-Standard' policy. While we are primarily governed by Kosovo Law No. 06/L-082, our infrastructure is engineered to meet and exceed global standards, including the EU-U.S. Data Privacy Framework (DPF) and the California Consumer Privacy Act (CCPA).

GDPR Compliance

Legal Basis for Processing

We process your personal data based on the following lawful bases under Article 6 of the GDPR:

  • Legitimate Interest (Article 6(1)(f)) - Website analytics and performance monitoring, security monitoring and fraud prevention, network and information security
  • Contractual Necessity (Article 6(1)(b)) - Processing client inquiries and service requests, delivering services you have requested, communication related to our services
  • Consent (Article 6(1)(a)) - Non-essential cookies and tracking technologies, marketing communications (if applicable in future)

Data Subject Rights

Under the GDPR, you have the following rights:

  • Right to Access (Article 15): Request copies of your personal data
  • Right to Rectification (Article 16): Correct inaccurate personal data
  • Right to Erasure (Article 17): Request deletion of your personal data
  • Right to Restrict Processing (Article 18): Limit how we use your personal data
  • Right to Data Portability (Article 20): Request transfer of your data
  • Right to Object (Article 21): Object to processing based on legitimate interest
  • Rights Related to Automated Decision-Making (Article 22): Protection from automated decisions

Data Retention Periods

We retain personal data for the following periods:

  • Analytics Data: 26 months (Google Analytics default)
  • Contact Inquiries: 2 years from last communication
  • Service-related Data: 7 years from service completion
  • Security Logs: 6 months for security monitoring

International Data Transfers

Your personal data may be transferred to countries outside the EU. We ensure adequate protection through:

  • EU-US Data Privacy Framework for US transfers
  • Standard Contractual Clauses (SCCs) for other international transfers
  • Adequacy Decisions where applicable

Data Protection Officer

For GDPR-related matters, contact our Data Protection Officer at:

California Consumer Privacy Act (CCPA) Compliance

Rights for California Residents

If you are a California resident, you have the following rights under the CCPA:

  • Right to Know (Article 1798.100) - Request disclosure of personal information we collect and use, request categories and specific pieces of personal information
  • Right to Delete (Article 1798.105) - Request deletion of your personal information, verification process for deletion requests
  • Right to Opt-Out (Article 1798.120) - Opt-out of sale or sharing of personal information, "Do Not Sell or Share My Personal Information" link
  • Right to Non-Discrimination (Article 1798.125) - We will not discriminate for exercising privacy rights, equal service and pricing regardless of privacy choices

Financial Incentives

We do not currently offer financial incentives for personal information. If we introduce such programs in the future, we will:

  • Clearly disclose the material terms
  • Obtain your written consent
  • Ensure programs are reasonably priced

Employee and Agent Access

We disclose personal information to our employees and agents only for business purposes. All employees and agents are bound by confidentiality obligations and privacy policies.

Authorized Agent Requests

You may authorize an agent to make requests on your behalf. We will verify the agent's authority before processing requests.

Opt-Out Mechanism

To opt-out of the sale or sharing of your personal information:

  • Email: privacy@mebigx.com with subject "CCPA Opt-Out"
  • Response Time: Within 15 business days
  • Global Opt-Out: Browser settings for cross-site tracking

Data Breach Notification

In the event of a personal data breach, we will:

  1. Assess the Risk - Evaluate likelihood and severity of risk to your rights
  2. Notify Within 72 Hours - Report to supervisory authorities within 72 hours of discovery (GDPR)
  3. Individual Notification - Notify you without undue delay if high risk is identified
  4. Breach Contents - Include nature of breach, measures taken, and potential consequences
  5. Remediation - Provide recommendations to protect your personal data

For breach-related inquiries, contact: privacy@mebigx.com

Your Rights

You have the right to access, update, or delete your personal information. You can also opt out of analytics tracking through our cookie consent system.

Right to Complain: Under Law No. 06/L-082, you have the right to lodge a complaint with the Information and Privacy Agency (AIP) at Str. Zejnel Salihu, No. 22, 10000 Prishtina, or visit aip.rks-gov.net.

Third-Party Services

We may use third-party services for analytics, hosting, and email delivery. These services have their own privacy policies governing the use of your information.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

Contact

If you have questions about this Privacy Policy, please contact us at privacy@mebigx.com